CVE-2012-1556: Synology Diskstation Manager

Medium severity, CVSS 4.3. EPSS: 3.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Synology Photo Station 5 for DiskStation Manager (DSM) 3.2-1955 allows remote attackers to inject arbitrary web script or HTML via the name parameter to photo/photo_one.php.

Affected products

• Synology Diskstation Manager: version 3.2-1955 only
• Synology Synology Photo Station: version 5 only

Published 2014-09-12. Last modified 2026-06-16.